Product by Jupyter

    Jupyter Notebook

    19 known vulnerabilities in Jupyter Notebook (Jupyter), 0 of them actively exploited (CISA KEV).

    Key figures

    19

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Jupyter Notebook (Jupyter)
    CriticalCVE-2021-32798

    Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in notebook

    		10.0
    CriticalCVE-2021-32797

    JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>

    also in 2 other products

    		7.4
    MediumCVE-2019-10255

    Jupyter JupyterHub: Open Redirect

    also in 1 other product

    		6.1
    MediumCVE-2018-19351

    Jupyter Notebook: Cross-Site Scripting (XSS)

    		6.1
    CriticalCVE-2026-42557

    Jupyterlab: Cross-site Scripting

    also in 2 other products

    		9.6
    HighCVE-2022-24758

    Insertion of Sensitive Information into Log File affects Jupyter Notebook

    		7.5
    HighCVE-2026-40171

    Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker

    also in 1 other product

    		—
    MediumCVE-2019-9644

    Jupyter Notebook: security vulnerability

    		5.4
    MediumCVE-2018-19352

    Jupyter Notebook: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2018-8768

    Jupyter Notebook: security vulnerability

    		7.8
    MediumCVE-2018-21030

    Jupyter Notebook: Cross-Site Scripting (XSS)

    		5.3
    MediumCVE-2019-10856

    Jupyter Notebook: Open Redirect

    		6.1
    HighCVE-2024-22421

    Potential authentication and CSRF tokens leak in JupyterLab

    also in 3 other products

    		7.6
    MediumCVE-2020-26215

    Open redirect in Jupyter Notebook

    also in 1 other product

    		4.4
    Not ratedCVE-2015-6938

    Jupyter Notebook: Cross-Site Scripting (XSS)

    also in 3 other products

    		—
    MediumCVE-2022-29238

    Forced Browsing in Jupyter Notebook

    		4.3
    Not ratedCVE-2015-7337

    Jupyter Notebook: security vulnerability

    also in 1 other product

    		—
    MediumCVE-2024-22420

    Stored cross site scripting in Markdown Preview in JupyterLab

    also in 3 other products

    		6.5
    HighCVE-2024-43805

    HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

    also in 2 other products

    		7.6

    All products by Jupyter